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Amendments to the Claims 

This listing of the claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims : 

1. (Currently Amended) A method for transparent access authentication of 
subscribers connected to an authenticating network domain by a General Packet Radio Service 
GPRS core network or an Universal Mobile Telecommunication System UMTS network, 
comprising: 

receiving a context creation request from a subscriber; 
assigning an IP address to the contex t creation request : 
receiving [[an]]_a check-in ID from the subscriber; 

receiving a private identification PrivID from the subscriber, the PrivID ts -being 
correlated with a pre-recorded ID of the subscriber in -and stored together a subscriber database; 

authenticating the subscriber by comparing the check-in ID with the pre-recorded 

IDi 

authenticating the subscriber when the check-in ID matches the pre-recorded ID; 

for match 

providing a routing module (7) as a standard entry point for all messages and 
deciding, in the routing module (7), by evaluation of the PrivID, which network node will handle 
the message, wherein when a protoc o l other than SIP is found, the message is routed to a proxy 

server. 
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2. (Previously Presented) The method according to claim 1, wherein the step of 
^fee-authenticating the subscriber includes , in a Serving GPRS Support Node, using an A3/A8 
algorithm based on an end devices a SIM car d in an end device . 

3. (Previously Presented) The method according to claim 1, further includes: 
using a Gateway GPRS Support Node to receive the context creation request; 
querying the context creation r equest to a Radius server; 

using the Radius server to receive the check-in ID; and 
storing the IP address and the check-in ID in a session database. 

4. (Previously Presented) The method according to claim 1, further includes: 
using a proxy server comparing the check-in ID with the pre-recorded ID, 

wherein the subscriber database is an application domain database. 

5. (Previously Presented) The method according to claim 1, further includes: 
using a Radius proxy server to compare a subscriber's IP address in an IP network 

layer with the assigned IP address for match. 

6. (Previously Presented) The method according to claim 1, further includes: 
using a proxy server to parse an application layer for IP addresses given in 

headers of registration messages and to compare with the assigned IP address for match, the IP 
address given in the headers was -having already been checked for mateh -matches with the 
assigned IP address. 

7. (Previously Presented) The method according to claim 1, further comprising 

the step that in all subsequent messages arriving at the proxy server (5), it checks checking for 
mateh -matches of an IP address in the IP packet overhead field for source address with feat -an IP 
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address in the application layer protocol header fields and verifies verifying the matching pairs 
against the IP address assigned by the Radius server (2) server . 

8. (Cancelled) 

9. (Currently Amended) A system of units in a mobile telecommunication 
network, comprising: 

at least a first authentication unit connected to a session database via a first data 

line; and 

a second unit connected to the session database via a second data line; 
wherein the second unit assembles data according to the method of claim 1. 

10. (Previously Presented) The system of units according to claim 9, wherein 
the first unit comprises a registration server. 

11. (Cancelled). 

12. (Previously Presented) The system of units according to claim 9, wherein 
the second unit comprises a proxy server. 

13. (Previously Presented) The system of units according to claim 9, wherein 
the second unit comprises a proxy server connected to a Proxy Call State Control Function via a 
routing module. 

14. (Previously Presented) The system of units according to claim 13, wherein 
the second unit is connected to a subscriber database. 

15. (Previously Presented) The system of units according to claim 13, wherein a 

routing module selects messages from one of the proxy server and the Proxy Call State Control 
Function by evaluating the PrivID. 
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16. (Previously Presented) The method of claim 1, wherein the check-in ID is 
one of an Mobile Station ISDN Number MSISDN [[and]] and/or an International Mobile 
Subscriber Identity IMSI received from the subscriber, and the pre-recorded ID is one of the 
subscriber's MSISDN [[and]] or IMSI pre-recorded in a subscriber database. 

17. (Previously Presented) The system according to claim 12, wherein the proxy 
server (5) is connected to a subscriber database (4). 


-5- 


